Brenda Ferraro
Vice President of Third-Party Risk
Brenda Ferraro brings several years of first-hand experience addressing the third-party risks associated with corporate vendors, services and data handling companies. In her quest to economize third-party risk, she organized a myriad of stakeholders and devised an approach to manage risk, receiving recognition from regulators and a multitude of Information Security and Analysis Centers (ISACs). In her role with Prevalent, Brenda works with corporations to build single-solution ecosystems that remove the complexities of Third-Party Risk Management by way of a common, simple and affordable platform, framework and governance methodology. Prior to joining Prevalent, Brenda led organizations through control standardization, incident response, process improvements, data-based reporting, and governance at companies including Aetna, Coventry, Arrowhead Healthcare Centers, PayPal/eBay, Charles Schwab, and Edwards Air Force Base. She holds certifications in vBSIMM, CTPRP, ITIL and CPM.
Published Work
-
Third-Party Vendor Risk Management Policies: Best Practices to Implement Now
Building a clear set of policies can help propel your organization’s third-party risk management practices and...
06/03/2021 by Brenda Ferraro
-
What to Look for in a Vendor Risk Assessment Report
Good vendor risk assessment reports help strengthen vendor relationships, demonstrate proper due diligence, and shed light...
04/13/2021 by Brenda Ferraro
-
Accellion Data Breach: Four Strategies for Third-Party Risk Response
Global energy giant Shell is the latest victim of the Accellion breach. As the number of...
03/22/2021 by Brenda Ferraro
-
Three Recommendations to Improve Law Firm Third-Party Due Diligence
Recent breaches serve as reminders for law firms to examine their third-party risk management programs. Here...
03/10/2021 by Brenda Ferraro
-
Bonobos Breach: How to Ensure Your Third-Party CSP Is Securing...
The latest third-party breach is a reminder that you can outsource data management, but you can’t...
02/01/2021 by Brenda Ferraro
-
Vendor Due Diligence Strategy Guide and Checklist
Is your vendor due diligence process keeping pace with rapidly evolving risks? Here are three approaches...
10/23/2020 by Brenda Ferraro
-
Avoid These 5 Gotchas of Vendor Risk Management
Use this checklist to benchmark where your vendor risk management processes stand and where you can...
08/26/2020 by Brenda Ferraro
-
How Third-Party Risk Management Can Ensure Supply Chain Resiliency in...
Current events provide a reminder that regional crises illuminate concentration risk. How can third-party risk management...
02/28/2020 by Brenda Ferraro
-
3 Keys to Hitting the Third-Party Risk Maturity Bullseye
Achieving a sustainable level of third-party risk management maturity requires three essential components. Read this post...
12/10/2019 by Brenda Ferraro